{"vulnerability": "CVE-2026-91013", "sightings": [{"uuid": "00acfc57-2dcf-46f6-bc34-480ce5175e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91013", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mxuryg47kl2m", "content": "CVE-2026-91013 (CRITICAL) CVSS 9.3: https://experiencedigest.org/2026/10/14/201722.html", "creation_timestamp": "2026-10-15T00:18:32.020124Z"}, {"uuid": "e3332eed-1a7b-4006-a2ad-9ba674c58045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91013", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117435071543526651", "content": "CVE-2026-91013 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.\nhttps://www.cve.org/CVERecord?id=CVE-2026-91013https://www.adobe.com/trust/security/products/commerce/apsb26-153.html#adobe #Adobe #AdobeCommerce #AdobeCommerceB2B #MagentoOpenSource#CVE_2026_91013#bot", "creation_timestamp": "2026-10-13T18:43:05.834604Z"}, {"uuid": "300b5b2b-6b0e-4923-adac-ee474ffc431f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91013", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxs2hcxnz62h", "content": "\ud83d\udea8 CVE-2026-91013 \u2014 CVSS 9.3 CRITICAL\n\nAdobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-91013\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-13T22:12:01.575627Z"}, {"uuid": "5f66ef3d-2427-4035-a030-27d3008866d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91013", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsjgo5sex2n", "content": "CVE-2026-91013 - adobe commerce\nAdobe Commerce, including its B2B and Magento Open Source versions, lets an attacker store harmful code in certain form fields. When a user later opens that page, the code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobecommerce #adobe #CVE #infosec", "creation_timestamp": "2026-10-14T02:40:05.853417Z"}]}